openclaw-node-harness 2.0.0

package/workspace-bin/openclaw-register-source

@@ -0,0 +1,102 @@
+#!/usr/bin/env node
+/**
+ * openclaw-register-source — Manage transcript source registry.
+ *
+ * Usage:
+ *   openclaw-register-source add --name "kimi" --path "/path/to/sessions" --format "generic"
+ *   openclaw-register-source remove --name "kimi"
+ *   openclaw-register-source list
+ *
+ * Registry: ~/.openclaw/config/transcript-sources.json
+ */
+
+const fs = require('fs');
+const path = require('path');
+const os = require('os');
+
+const CONFIG_PATH = path.join(os.homedir(), '.openclaw/config/transcript-sources.json');
+
+function loadRegistry() {
+  if (!fs.existsSync(CONFIG_PATH)) {
+    return { sources: [] };
+  }
+  return JSON.parse(fs.readFileSync(CONFIG_PATH, 'utf-8'));
+}
+
+function saveRegistry(reg) {
+  fs.mkdirSync(path.dirname(CONFIG_PATH), { recursive: true });
+  fs.writeFileSync(CONFIG_PATH, JSON.stringify(reg, null, 2) + '\n', 'utf-8');
+}
+
+function parseArgs(args) {
+  const result = {};
+  for (let i = 0; i < args.length; i++) {
+    if (args[i].startsWith('--') && i + 1 < args.length) {
+      result[args[i].slice(2)] = args[i + 1];
+      i++;
+    }
+  }
+  return result;
+}
+
+const [,, command, ...rest] = process.argv;
+const opts = parseArgs(rest);
+
+switch (command) {
+  case 'add': {
+    if (!opts.name || !opts.path) {
+      console.error('Usage: openclaw-register-source add --name <name> --path <dir> [--format generic|claude-code|openclaw-gateway]');
+      process.exit(1);
+    }
+    const reg = loadRegistry();
+    const existing = reg.sources.findIndex(s => s.name === opts.name);
+    const entry = {
+      name: opts.name,
+      path: opts.path,
+      format: opts.format || 'generic',
+      enabled: true
+    };
+    if (existing >= 0) {
+      reg.sources[existing] = entry;
+      console.log(`Updated source: ${opts.name}`);
+    } else {
+      reg.sources.push(entry);
+      console.log(`Added source: ${opts.name} → ${opts.path}`);
+    }
+    saveRegistry(reg);
+    break;
+  }
+  case 'remove': {
+    if (!opts.name) {
+      console.error('Usage: openclaw-register-source remove --name <name>');
+      process.exit(1);
+    }
+    const reg = loadRegistry();
+    const before = reg.sources.length;
+    reg.sources = reg.sources.filter(s => s.name !== opts.name);
+    if (reg.sources.length < before) {
+      saveRegistry(reg);
+      console.log(`Removed source: ${opts.name}`);
+    } else {
+      console.log(`Source not found: ${opts.name}`);
+    }
+    break;
+  }
+  case 'list': {
+    const reg = loadRegistry();
+    if (reg.sources.length === 0) {
+      console.log('No transcript sources registered.');
+    } else {
+      console.log(`${reg.sources.length} transcript source(s):\n`);
+      for (const s of reg.sources) {
+        const status = s.enabled === false ? ' [disabled]' : '';
+        console.log(`  ${s.name} (${s.format})${status}`);
+        console.log(`    → ${s.path}`);
+      }
+    }
+    break;
+  }
+  default:
+    console.log('Usage: openclaw-register-source <add|remove|list> [--name ...] [--path ...] [--format ...]');
+    process.exit(command ? 1 : 0);
+}

package/workspace-bin/proactive-scan

@@ -0,0 +1,147 @@
+#!/usr/bin/env bash
+# proactive-scan — Scan for actionable triggers during heartbeat
+#
+# Usage:
+#   bin/proactive-scan [--dry-run]    # show triggers without acting
+#   bin/proactive-scan                # report triggers for agent spawning
+#   bin/proactive-scan --help
+#
+# Checks:
+#   1. Stale running tasks (running > 30min without update)
+#   2. Uncommitted work in project directories
+#   3. Circuit breaker recovery opportunities
+#
+# Output: JSON array of trigger objects
+# Exit: 0 if triggers found, 1 if none
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+WORKSPACE="${OPENCLAW_WORKSPACE:-$(dirname "$SCRIPT_DIR")}"
+ACTIVE_TASKS="$WORKSPACE/memory/active-tasks.md"
+TRUST_REGISTRY="$WORKSPACE/.tmp/trust-registry.json"
+DRY_RUN=false
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --dry-run) DRY_RUN=true; shift ;;
+    --help|-h) sed -n '2,/^$/p' "$0" | sed 's/^# //' | sed 's/^#//'; exit 0 ;;
+    *) shift ;;
+  esac
+done
+
+# Collect triggers as JSON via Python (reliable parsing)
+TRIGGERS=$(python3 << 'PYEOF'
+import json, re, os, subprocess
+from datetime import datetime, timedelta
+from pathlib import Path
+
+workspace = os.environ.get("OPENCLAW_WORKSPACE", os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
+active_tasks = os.path.join(workspace, "memory/active-tasks.md")
+trust_registry = os.path.join(workspace, ".tmp/trust-registry.json")
+triggers = []
+
+# --- Check 1: Stale running tasks ---
+if os.path.isfile(active_tasks):
+    content = open(active_tasks).read()
+    blocks = re.split(r'^- task_id:', content, flags=re.MULTILINE)
+    now = datetime.now()
+
+    for block in blocks[1:]:
+        task_id = block.split('\n')[0].strip()
+        status_m = re.search(r'status:\s*(\S+)', block)
+        updated_m = re.search(r'updated_at:\s*(.+)', block)
+        title_m = re.search(r'title:\s*(.+)', block)
+
+        if not status_m or status_m.group(1) != 'running':
+            continue
+
+        if updated_m:
+            ts_raw = updated_m.group(1).strip()
+            # Handle both formats: "2026-02-21 09:15 America/Montreal" and ISO
+            for fmt in ('%Y-%m-%d %H:%M America/Montreal', '%Y-%m-%dT%H:%M:%S.%fZ', '%Y-%m-%d %H:%M'):
+                try:
+                    dt = datetime.strptime(ts_raw.replace('America/Montreal', '').strip(), fmt.replace(' America/Montreal', ''))
+                    if (now - dt) > timedelta(minutes=30):
+                        title = title_m.group(1).strip().strip('"') if title_m else task_id
+                        minutes = int((now - dt).total_seconds() / 60)
+                        triggers.append({
+                            "type": "stale_task",
+                            "description": f"Task {task_id} ({title}) running for {minutes}min without update",
+                            "task_id": task_id,
+                            "action": "check_status_or_escalate"
+                        })
+                    break
+                except ValueError:
+                    continue
+
+# --- Check 2: Uncommitted work in project dirs ---
+projects_dir = os.path.join(workspace, "projects")
+if os.path.isdir(projects_dir):
+    for proj in sorted(os.listdir(projects_dir)):
+        proj_path = os.path.join(projects_dir, proj)
+        git_dir = os.path.join(proj_path, ".git")
+        if not os.path.isdir(proj_path) or not os.path.exists(git_dir):
+            continue
+        try:
+            result = subprocess.run(
+                ["git", "-C", proj_path, "diff", "--stat", "HEAD"],
+                capture_output=True, text=True, timeout=5
+            )
+            stat = result.stdout.strip()
+            if stat and "file" in stat.split('\n')[-1]:
+                summary = stat.split('\n')[-1].strip()
+                triggers.append({
+                    "type": "uncommitted_work",
+                    "description": f"Uncommitted changes in projects/{proj}: {summary}",
+                    "task_id": None,
+                    "action": "review_and_commit"
+                })
+        except (subprocess.TimeoutExpired, OSError):
+            pass
+
+# --- Check 3: Circuit breaker recovery ---
+if os.path.isfile(trust_registry):
+    try:
+        reg = json.load(open(trust_registry))
+        now = datetime.now()
+        for soul_id, s in reg.get("souls", {}).items():
+            state = s.get("circuit_state", "closed")
+            if state == "open":
+                opened = s.get("circuit_opened_at")
+                cooldown = s.get("cooldown_minutes", 30)
+                if opened:
+                    try:
+                        elapsed = (now - datetime.fromisoformat(opened)).total_seconds() / 60
+                        if elapsed >= cooldown:
+                            triggers.append({
+                                "type": "circuit_recovery",
+                                "description": f"Soul {soul_id} cooldown expired ({int(elapsed)}min). Ready for probe.",
+                                "task_id": None,
+                                "action": "probe_delegation"
+                            })
+                    except (ValueError, TypeError):
+                        pass
+    except (json.JSONDecodeError, OSError):
+        pass
+
+print(json.dumps(triggers, indent=2))
+PYEOF
+)
+
+COUNT=$(echo "$TRIGGERS" | python3 -c "import json,sys; print(len(json.load(sys.stdin)))")
+
+if [ "$COUNT" -eq 0 ]; then
+  echo "No actionable triggers found."
+  exit 1
+fi
+
+echo "$TRIGGERS"
+echo ""
+echo "Found $COUNT actionable trigger(s)."
+
+if $DRY_RUN; then
+  echo "(dry-run: no actions taken)"
+fi
+
+exit 0

package/workspace-bin/quality-gate

@@ -0,0 +1,175 @@
+#!/usr/bin/env bash
+# quality-gate — Write-time quality check for sub-agent work
+#
+# Usage:
+#   bin/quality-gate --files file1 file2 ...
+#   bin/quality-gate --check-all             # scan all uncommitted changes
+#   bin/quality-gate --project arcane        # scope to a project
+#   bin/quality-gate --help
+#
+# Checks:
+#   1. Security patterns (eval, exec, secrets, dangerouslySetInnerHTML)
+#   2. TypeScript compilation (tsc --noEmit, if tsconfig exists)
+#   3. Test proximity (warn if .test file exists but wasn't run)
+#   4. Solidity basics (unchecked calls)
+#   5. Screenshot gate (UI file modifications require visual evidence)
+#
+# Exit codes:
+#   0 = all gates passed
+#   1 = gate failure (must fix before proceeding)
+#   2 = warnings only (can proceed with caution)
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+WORKSPACE="${OPENCLAW_WORKSPACE:-$(dirname "$SCRIPT_DIR")}"
+FAILURES=0
+WARNINGS=0
+
+# --- Parse args ---
+FILES=()
+CHECK_ALL=false
+PROJECT=""
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --files) shift; while [[ $# -gt 0 && ! "$1" =~ ^-- ]]; do FILES+=("$1"); shift; done ;;
+    --check-all) CHECK_ALL=true; shift ;;
+    --project) PROJECT="$2"; shift 2 ;;
+    --help|-h)
+      sed -n '2,/^$/p' "$0" | sed 's/^# //' | sed 's/^#//'
+      exit 0 ;;
+    *) FILES+=("$1"); shift ;;
+  esac
+done
+
+# If check-all, gather uncommitted changes
+if $CHECK_ALL; then
+  mapfile -t STAGED < <(git -C "$WORKSPACE" diff --cached --name-only 2>/dev/null || true)
+  mapfile -t UNSTAGED < <(git -C "$WORKSPACE" diff --name-only HEAD 2>/dev/null || true)
+  FILES=("${STAGED[@]}" "${UNSTAGED[@]}")
+  # Deduplicate
+  if [ ${#FILES[@]} -gt 0 ]; then
+    mapfile -t FILES < <(printf '%s\n' "${FILES[@]}" | sort -u)
+  fi
+fi
+
+if [ ${#FILES[@]} -eq 0 ]; then
+  echo "No files to check."
+  exit 0
+fi
+
+echo "Quality gate: checking ${#FILES[@]} file(s)..."
+
+# --- Gate 1: Security patterns ---
+SECURITY_PATTERNS='(eval\(|execSync\(|dangerouslySetInnerHTML|PRIVATE_KEY\s*=|SECRET_KEY\s*=|password\s*=\s*["\x27][^"\x27])'
+for f in "${FILES[@]}"; do
+  FULL="$WORKSPACE/$f"
+  [ -f "$FULL" ] || continue
+  MATCHES=$(grep -nE "$SECURITY_PATTERNS" "$FULL" 2>/dev/null || true)
+  if [ -n "$MATCHES" ]; then
+    echo "  WARN [security]: Suspicious pattern in $f:"
+    echo "$MATCHES" | head -3 | sed 's/^/    /'
+    WARNINGS=$((WARNINGS + 1))
+  fi
+done
+
+# --- Gate 2: TypeScript compilation ---
+TS_FILES=()
+for f in "${FILES[@]}"; do
+  [[ "$f" =~ \.(ts|tsx)$ ]] && TS_FILES+=("$f")
+done
+
+if [ ${#TS_FILES[@]} -gt 0 ]; then
+  PROJECT_DIR=""
+  if [ -n "$PROJECT" ]; then
+    PROJECT_DIR="$WORKSPACE/projects/$PROJECT"
+  else
+    FIRST="${TS_FILES[0]}"
+    if [[ "$FIRST" =~ ^projects/([^/]+)/ ]]; then
+      PROJECT_DIR="$WORKSPACE/projects/${BASH_REMATCH[1]}"
+    fi
+  fi
+
+  if [ -n "$PROJECT_DIR" ] && [ -f "$PROJECT_DIR/tsconfig.json" ]; then
+    echo "  Checking TypeScript compilation..."
+    if ! (cd "$PROJECT_DIR" && npx --yes tsc --noEmit 2>&1 | tail -5); then
+      echo "  FAIL [typescript]: Compilation errors detected"
+      FAILURES=$((FAILURES + 1))
+    else
+      echo "  OK [typescript]: Clean"
+    fi
+  fi
+fi
+
+# --- Gate 3: Test proximity warning ---
+for f in "${FILES[@]}"; do
+  [[ "$f" =~ \.(ts|tsx|js|jsx)$ ]] || continue
+  [[ "$f" =~ \.test\. ]] && continue
+  [[ "$f" =~ \.spec\. ]] && continue
+
+  # Try common test file patterns
+  BASE="${f%.*}"
+  EXT="${f##*.}"
+  for PATTERN in "${BASE}.test.${EXT}" "${BASE}.spec.${EXT}"; do
+    if [ -f "$WORKSPACE/$PATTERN" ]; then
+      echo "  INFO [test]: Test file exists for $f -> $PATTERN (consider running)"
+      break
+    fi
+  done
+done
+
+# --- Gate 4: Solidity checks ---
+SOL_FILES=()
+for f in "${FILES[@]}"; do
+  [[ "$f" =~ \.sol$ ]] && SOL_FILES+=("$f")
+done
+
+if [ ${#SOL_FILES[@]} -gt 0 ]; then
+  echo "  Checking Solidity files..."
+  for f in "${SOL_FILES[@]}"; do
+    FULL="$WORKSPACE/$f"
+    [ -f "$FULL" ] || continue
+    # Check for low-level calls without success check
+    if grep -qE '\.call\{|\.call\(' "$FULL" 2>/dev/null; then
+      if ! grep -qE '(require|assert|if\s*\(success)' "$FULL" 2>/dev/null; then
+        echo "  WARN [solidity]: Potentially unchecked external call in $f"
+        WARNINGS=$((WARNINGS + 1))
+      fi
+    fi
+    # Check for selfdestruct
+    if grep -q 'selfdestruct' "$FULL" 2>/dev/null; then
+      echo "  WARN [solidity]: selfdestruct found in $f"
+      WARNINGS=$((WARNINGS + 1))
+    fi
+  done
+fi
+
+# --- Gate 5: Screenshot gate (UI file detection) ---
+UI_FILES=()
+for f in "${FILES[@]}"; do
+  if [[ "$f" =~ \.(tsx|jsx|css|scss)$ ]] && [[ "$f" =~ (components|pages|app|screens)/ ]]; then
+    UI_FILES+=("$f")
+  fi
+done
+
+if [ ${#UI_FILES[@]} -gt 0 ]; then
+  echo "  SCREENSHOT GATE: ${#UI_FILES[@]} UI file(s) modified — visual evidence required in artifacts:"
+  for f in "${UI_FILES[@]}"; do
+    echo "    - $f"
+  done
+  WARNINGS=$((WARNINGS + 1))
+fi
+
+# --- Result ---
+echo ""
+if [ $FAILURES -gt 0 ]; then
+  echo "QUALITY GATE: FAILED ($FAILURES failure(s), $WARNINGS warning(s))"
+  exit 1
+elif [ $WARNINGS -gt 0 ]; then
+  echo "QUALITY GATE: PASSED with $WARNINGS warning(s)"
+  exit 2
+else
+  echo "QUALITY GATE: PASSED"
+  exit 0
+fi

package/workspace-bin/screenshot

@@ -0,0 +1,96 @@
+#!/usr/bin/env bash
+# bin/screenshot — Capture desktop screenshot for OpenClaw
+# Usage: screenshot [--display N] [--delay N] [--clipboard] [output_path]
+#
+# Cross-platform: macOS (screencapture), Linux (scrot/gnome-screenshot/import)
+# Defaults: full main display, no delay, saved to .tmp/screenshots/<timestamp>.png
+# Returns: absolute path to captured image on stdout
+
+set -euo pipefail
+
+WORKSPACE="${OPENCLAW_WORKSPACE:-$(cd "$(dirname "$0")/.." && pwd)}"
+SCREENSHOT_DIR="$WORKSPACE/.tmp/screenshots"
+mkdir -p "$SCREENSHOT_DIR"
+
+# Defaults
+DELAY=""
+DELAY_SECS=0
+CLIPBOARD=false
+OUTPUT=""
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --display|-D) shift 2 ;;  # display selection (macOS only, ignored on Linux)
+    --delay|-T) DELAY_SECS="$2"; shift 2 ;;
+    --clipboard|-c) CLIPBOARD=true; shift ;;
+    --help|-h)
+      echo "Usage: screenshot [--delay N] [--clipboard] [output_path]"
+      echo ""
+      echo "Options:"
+      echo "  --delay N     Wait N seconds before capture"
+      echo "  --clipboard   Also copy to clipboard"
+      echo "  output_path   Custom output path (default: .tmp/screenshots/<timestamp>.png)"
+      exit 0
+      ;;
+    *) OUTPUT="$1"; shift ;;
+  esac
+done
+
+# Generate output path if not provided
+if [[ -z "$OUTPUT" ]]; then
+  TIMESTAMP=$(date +"%Y-%m-%d_%H-%M-%S")
+  OUTPUT="$SCREENSHOT_DIR/${TIMESTAMP}.png"
+fi
+
+detect_os() {
+  case "$(uname -s)" in
+    Darwin) echo "macos" ;;
+    Linux)  echo "linux" ;;
+    *)      echo "unknown" ;;
+  esac
+}
+
+OS=$(detect_os)
+
+capture_macos() {
+  local args=(-x)  # silent
+  [[ "$DELAY_SECS" -gt 0 ]] && args+=("-T$DELAY_SECS")
+  $CLIPBOARD && args+=(-c)
+  args+=("$OUTPUT")
+  screencapture "${args[@]}" 2>/dev/null
+}
+
+capture_linux() {
+  [[ "$DELAY_SECS" -gt 0 ]] && sleep "$DELAY_SECS"
+
+  if command -v scrot >/dev/null 2>&1; then
+    scrot "$OUTPUT"
+    $CLIPBOARD && command -v xclip >/dev/null 2>&1 && xclip -selection clipboard -t image/png -i "$OUTPUT"
+  elif command -v gnome-screenshot >/dev/null 2>&1; then
+    gnome-screenshot -f "$OUTPUT"
+    $CLIPBOARD && command -v xclip >/dev/null 2>&1 && xclip -selection clipboard -t image/png -i "$OUTPUT"
+  elif command -v import >/dev/null 2>&1; then
+    import -window root "$OUTPUT"
+  elif command -v flameshot >/dev/null 2>&1; then
+    flameshot full -p "$(dirname "$OUTPUT")" -r > "$OUTPUT"
+  else
+    echo "ERROR: No screenshot tool found. Install one of: scrot, gnome-screenshot, flameshot, imagemagick" >&2
+    exit 1
+  fi
+}
+
+case "$OS" in
+  macos)  capture_macos ;;
+  linux)  capture_linux ;;
+  *)
+    echo "ERROR: Unsupported platform for screenshots" >&2
+    exit 1
+    ;;
+esac
+
+if [[ -f "$OUTPUT" ]]; then
+  echo "$OUTPUT"
+else
+  echo "ERROR: Screenshot capture failed — no file at $OUTPUT" >&2
+  exit 1
+fi